In this chapter, we've gone over the basics of TCP/IP and how a packet is built. We've seen how to use the time information in a packet capture to our advantage, and how to add time columns and change the time settings. Furthermore, we've seen how to view different statistics in Wireshark on our packet capture to help get an idea of what the capture contains and how to use the expert system, which is a nice hidden feature in Wireshark to show us exactly what the problems are in the packet capture that Wireshark knows about.

In Chapter 6, Introductory Analysis, we'll see an introduction to analysis of different protocols.